U.S. General Services Administration on Mandate 72-hour reporting of critical A…

U.S. General Services Administration

U.S. federal agency responsible for government procurement, real estate, and technology policy.

The Contractor or Service Provider must complete the CISA incident reporting form [...] and notify the Contracting Officer and any Government provided point of contacts as soon as possible but not longer than within 72 hours of the discovery of any confirmed or suspected incident.

AI Verified (Mar 6, 2026)

Source:

U.S. General Services Administration, “GSA Federal Acquisition Service Proposed Government AI System Terms and Conditions,” draft clause issued March 6, 2026.